skill-docker-configuration

Name: skill-docker-configuration
Availability: InStock
Author: meridianhub

Automate multi-stage Docker builds for minimal Go production images.

10|2|Updated Oct 24, 2025

Search Tags:#security #production #docker #dockerfile #distroless #multistage-build #nonroot

Ready to run

npx skills add https://github.com/meridianhub/meridian --skill skill-docker-configuration

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: skill-docker-configuration
Source: https://github.com/meridianhub/meridian/tree/main/.claude/skills/docker
Command: npx skills add https://github.com/meridianhub/meridian --skill skill-docker-configuration

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Meridian deployment faces bloated images and inconsistent environments; this skill provides a clean, multi-stage Docker configuration that yields small, secure production images.

Core Features & Use Cases

Multi-stage builds using golang:1.26.2-bookworm for build
Runtime stage: gcr.io/distroless/static:nonroot
Non-root user, minimal runtime
Health checks, build optimizations (layer caching, static linking)
Supported by Make and Docker CLI guidance
Use cases: production deployments, CI/CD optimization.

Quick Start

Build a production image by running make docker and then run the container to verify deployment.

Frequently Asked Questions about skill-docker-configuration

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I create a minimal Docker image for production Go services?▼

To create a minimal Docker image for production Go services, use a multi-stage Dockerfile that builds with golang:1.26.2-bookworm and deploys to a gcr.io/distroless/static:nonroot runtime for a small, secure image.

What is a distroless Docker runtime and when do I need it for production?▼

A distroless Docker runtime is a minimal container image containing only your application and its runtime dependencies, without package managers or shells. You need it for production to reduce attack surface and image size.

Can I run Docker containers as a non-root user for better security?▼

Yes, you can run Docker containers as a non-root user by using a runtime image like gcr.io/distroless/static:nonroot. This prevents privilege escalation attacks and enforces secure production deployment practices.

Does this Docker configuration support CI/CD pipelines with environment build arguments?▼

Yes, this Docker configuration supports CI/CD pipelines by accepting environment-configurable build arguments, enabling layer caching and static linking for reproducible, optimized production builds across different deployment environments.

What are the limitations of using distroless images for Docker deployments?▼

Distroless images lack a shell and package manager, limiting interactive debugging and runtime dependency installation. You must include necessary certificates and configurations during the build stage rather than modifying them at runtime.

kurtosis-tech

547

docker-local-build

Builds and tests Kurtosis from source on local Docker, compiling Engine, Core, Files Artifacts Expander, CLI, tagging images with git short SHA, and restarting the engine for a clean test environment.

Official

Intermediate